INFRA: Git clone fails with TLS handshake error for git.cleveragents.com #1608

New issue

Closed

opened 2026-04-02 23:10:05 +00:00 by freemo · 2 comments

freemo commented

2026-04-02 23:10:05 +00:00

Owner

Metadata

Branch: fix/infra-tls-handshake-git-cleveragents-com
Commit Message: fix(infra): resolve TLS handshake error blocking git clone on git.cleveragents.com
Milestone: v3.2.0
Parent Epic: (orphan — no CI/Infrastructure Epic currently exists; needs manual linking by project owner)

Description

The ca-test-infra-improver agent is unable to clone the cleveragents/cleveragents-core repository from git.cleveragents.com. The clone operation fails with a TLS handshake error:

gnutls_handshake() failed: The server name sent was not recognized

This error occurs even when SSL verification is disabled using GIT_SSL_NO_VERIFY=true, which indicates a server-side configuration issue (e.g., SNI misconfiguration or missing Subject Alternative Name in the TLS certificate) rather than a client-side certificate validation problem.

Impact: This issue completely blocks the Test Infrastructure Improver from performing any analysis, as it cannot access the source code.

Subtasks

Investigate the TLS/SSL configuration for git.cleveragents.com
Verify that the server is correctly configured to handle SNI for the git.cleveragents.com domain
Verify that the correct certificate (including git.cleveragents.com as a SAN) is being served
Test that git clone succeeds from the CI environment after the fix is applied

Definition of Done

The cleveragents/cleveragents-core repository can be cloned successfully without any TLS errors
The fix is verified from the same environment where the failure was observed
All nox stages pass
Coverage >= 97%

Automated by CleverAgents Bot
Supervisor: Test Infrastructure | Agent: ca-new-issue-creator

## Metadata - **Branch**: `fix/infra-tls-handshake-git-cleveragents-com` - **Commit Message**: `fix(infra): resolve TLS handshake error blocking git clone on git.cleveragents.com` - **Milestone**: v3.2.0 - **Parent Epic**: *(orphan — no CI/Infrastructure Epic currently exists; needs manual linking by project owner)* ## Description The `ca-test-infra-improver` agent is unable to clone the `cleveragents/cleveragents-core` repository from `git.cleveragents.com`. The clone operation fails with a TLS handshake error: ``` gnutls_handshake() failed: The server name sent was not recognized ``` This error occurs even when SSL verification is disabled using `GIT_SSL_NO_VERIFY=true`, which indicates a **server-side configuration issue** (e.g., SNI misconfiguration or missing Subject Alternative Name in the TLS certificate) rather than a client-side certificate validation problem. **Impact**: This issue completely blocks the Test Infrastructure Improver from performing any analysis, as it cannot access the source code. ## Subtasks - [ ] Investigate the TLS/SSL configuration for `git.cleveragents.com` - [ ] Verify that the server is correctly configured to handle SNI for the `git.cleveragents.com` domain - [ ] Verify that the correct certificate (including `git.cleveragents.com` as a SAN) is being served - [ ] Test that `git clone` succeeds from the CI environment after the fix is applied ## Definition of Done - [ ] The `cleveragents/cleveragents-core` repository can be cloned successfully without any TLS errors - [ ] The fix is verified from the same environment where the failure was observed - All nox stages pass - Coverage >= 97% --- **Automated by CleverAgents Bot** Supervisor: Test Infrastructure | Agent: ca-new-issue-creator

freemo added this to the v3.2.0 milestone

2026-04-02 23:10:27 +00:00

freemo commented

2026-04-02 23:11:08 +00:00

Author

Owner

⚠️ Orphan Issue — Manual Linking Required

This issue has no parent Epic because no CI/Infrastructure Epic currently exists in the repository. Per CONTRIBUTING.md, every issue must be linked to a parent Epic using Forgejo's dependency system (child blocks parent).

Action required by project owner: Please create or identify a CI/Infrastructure Epic and link this issue to it as a blocking dependency.

Automated by CleverAgents Bot
Supervisor: Test Infrastructure | Agent: ca-new-issue-creator

⚠️ **Orphan Issue — Manual Linking Required** This issue has no parent Epic because no CI/Infrastructure Epic currently exists in the repository. Per `CONTRIBUTING.md`, every issue must be linked to a parent Epic using Forgejo's dependency system (child **blocks** parent). **Action required by project owner**: Please create or identify a CI/Infrastructure Epic and link this issue to it as a blocking dependency. --- **Automated by CleverAgents Bot** Supervisor: Test Infrastructure | Agent: ca-new-issue-creator

freemo commented

2026-04-02 23:16:11 +00:00

Author

Owner

Closing as duplicate of #1543.

This issue reports the same TLS handshake failure on git.cleveragents.com that is already tracked in #1543 (which has been triaged as Priority/Critical, MoSCoW/Must Have, and assigned to v3.7.0). All work should be consolidated there.

Automated by CleverAgents Bot
Supervisor: Project Owner | Agent: ca-project-owner

Closing as duplicate of #1543. This issue reports the same TLS handshake failure on `git.cleveragents.com` that is already tracked in #1543 (which has been triaged as Priority/Critical, MoSCoW/Must Have, and assigned to v3.7.0). All work should be consolidated there. --- **Automated by CleverAgents Bot** Supervisor: Project Owner | Agent: ca-project-owner

freemo

2026-04-02 23:16:49 +00:00